CISO Insights: Voices in Cybersecurity

This episode deep dives into the tense "cat-and-mouse" game between regulators and tech giants following the implementation of Australia's historic under-16 social media ban in December 2025. We expose the "poor practices" uncovered by the eSafety Commissioner's active investigations, showing how platforms allowed underage children double-digit attempts to bypass facial age scans and even demanded formal lawyer letters from parents trying to shut down their kids' profiles. Finally, we analyze the major August 2026 escalations, detailing why Australia doubled its non-compliance fines to AUD $99 million and how New Zealand's new ban threatens platforms with penalties of up to 10% of their global revenue.

 

Sponsors:

www.cisomarketplace.com

www.compliancehub.wiki

www.myprivacy.blog

As autonomous AI agents rapidly compress the timeline between vulnerability and exploit, CISOs and security leaders must transition from traditional perimeter-based security to a dedicated agentic Zero Trust framework. This episode details how to deploy robust, enterprise-ready controls—including identity-based isolation, Just-In-Time (JIT) access, and advanced runtime defenses like Spotlighting and constitutional classifiers—to neutralize prompt injection and secure agent workloads. Finally, we explore why cryptographic "hard barriers" are fundamentally superior to temporary friction-based controls.
 
Sponsor:
www.cisomarketplace.com

As artificial intelligence shifts from passive conversational tools to autonomous agents capable of independent system execution, establishing secure boundaries for identity, delegation, and authorization has emerged as a paramount federal priority. This episode explores the National Institute of Standards and Technology's (NIST) AI Agent Standards Initiative, detailing how the agency is coordinating industry-led standards, open-source community protocols, and fundamental cryptographic research. We examine the real-world implications of this framework for high-stakes sectors like finance and healthcare, highlighting how organizations can apply emerging identity guidelines to protect multi-agent environments from session hijacking and unauthorized tool execution.

 

Sponsors:

www.vibehack.dev

www.airiskassess.com

www.cisomarketplace.com/blog

As AI deployments transition from basic chatbot interfaces into autonomous agents capable of executing complex real-world workflows, organizations are discovering that traditional input filtering can no longer guarantee safety. This podcast explores the critical security boundaries mapped across OWASP's main AI safety directories: the GenAI LLM Top 10, the Agentic Applications Top 10, and the newly released Agentic Skills Top 10. Join us as we dissect core vulnerabilities like malicious skills, over-privileged credentials, and supply chain compromises, outlining how security teams can build robust, system-level boundaries to control the blast radius when a model is inevitably fooled.

 

Sponsors:

www.vibehack.dev

www.airiskassess.com

www.cisomarketplace.com

Welcome to the frontline of digital and physical supply chain security, where geopolitical shifts, software vulnerabilities, and complex regulatory mandates like the EU Cyber Resilience Act are rewriting the rules of corporate survival. In each episode, we dissect how modern enterprises move beyond basic third-party checklists to map nested fourth-party dependencies, deploy Software Bills of Materials (SBOMs), and manage algorithmic risks. Packed with actionable insights for CISOs and procurement teams, this show provides the tactical playbooks needed to build secure, transparent, and always-on global networks.
 
Sponsors:
www.cisomarketplace.com
www.breached.company
www.compliancehub.wiki